Module Name
Cisco Catalyst Embedded Wireless Controller on C9100 Series Access Points
Caveat
When installed, initialized and configured as specified in the Section 3 of Security Policy. When operated in FIPS mode. The tamper evident seals installed as indicated in the Security Policy. This module contains the embedded module ACT2Lite validated to FIPS 140-2 under Cert. #3637 operating in FIPS mode.
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The Cisco Catalyst Embedded Wireless Controller on C9100 Series Access Points is the next-generation Wi-Fi solution, combining the most advanced controller - the Cisco Catalyst 9800 Series Wireless Controllers - with the latest Wi-Fi 6 access points - the Cisco Catalyst 9100 Access Points - creating a best-in-class wireless experience for your evolving and growing organization.
Approved Algorithms
| AES |
Certs. #A877 and #A1462 |
| CKG |
vendor affirmed |
| CVL |
Certs. #A877 and #A1462 |
| DRBG |
Certs. #A877 and #A1462 |
| ECDSA |
Certs. #A877 and #A1462 |
| HMAC |
Certs. #A877 and #A1462 |
| KAS |
KAS-SSC Certs. #A877 and #A1462, CVL Certs. #A877 and #A1462 |
| KAS-SSC |
Certs. #A877 and #A1462; key establishment methodology provides between 112 and 256 bits of encryption strength |
| KTS |
AES Cert. #A877 and HMAC Cert. #A877; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #A1462 and HMAC Cert. #A1462; key establishment methodology provides between 128 and 256 bits of encryption strength |
| RSA |
Certs. #A877 and #A1462 |
| SHS |
Certs. #A877 and #A1462 |
| Triple-DES |
Cert. #A1462 |
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Hardware Versions
9115AXI with one FIPS Kit: AIR-AP-FIPSKIT=, 9115AXE with one FIPS Kit: AIR-AP-FIPSKIT=, 9120AXI with one FIPS Kit: AIR-AP-FIPSKIT=, 9120AXE with one FIPS Kit: AIR-AP-FIPSKIT=, 9120AXP with one FIPS Kit: AIR-AP-FIPSKIT=, 9130AXI with one FIPS Kit: AIR-AP-FIPSKIT=, 9130AXE with one FIPS Kit: AIR-AP-FIPSKIT=;
Firmware Versions
IOS-XE 17.3
